How to remove w9uxx92.exe

CRC32: 594A2ED4
MD5: 620094AF6DC5D97A0E7AC47519914E63
SHA1: FEC46DAAEBDC3EA4B35ACF59F1D60422126EAB25
===================================================
Create files
C:\DOCUME~1\ADMINI~1\LOCALS~1\temp\herss.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\temp\cvasds0.dll (0-9)
X:\w9uxx92.exe
X:\autorun.inf

Registy Modified
Keys added
HKLM\SOFTWARE\Classes\CLSID\MADOWN

  • Values added
HKLM\SOFTWARE\Classes\CLSID\MADOWN\urlinfo: "dsa2der.f"
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
cdoosoft: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\herss.exe"

  • Values modified
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\
Folder\Hidden\SHOWALL\CheckedValue: 0x00000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\
Hidden: 0x00000002
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\
ShowSuperHidden: 0x00000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
NoDriveTypeAutoRun: 0x00000091

Related Posts Plugin for WordPress, Blogger...
Disclaimer
All the contents posted here are found from various Search Engines blogs and forums. The Webmaster of this blog takes no responsibility what so ever for any of the content (image/audio/video). If you find some content inappropriate or if there is any violation of copyright, kindly contact the host of the content (image/audio/video) to remove it from their server.
 
✖ SedutMediaLink ✖ - Templates Novo Blogger 2008
This template is brought to you by : allblogtools.com Blogger Templates